YUNUCMS cross-site scripting vulnerability (CNVD-2018-23274)

YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 in admin/content/editcontent?id=29&gopage=1 there is a cross-site scripting vulnerability , attackers can exploit the vulnerability to carry out cross-site attacks...

PT-2018-14600

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description A cross-site scripting XSS issue was found in the "admin/content/editcontent?id=29&gopage=1" endpoint. This issue allows for potential malicious script execution. Recommendations For YUNUCMS version 1.1.5,...

CVE-2018-18722

YUNUCMS 1.1.5 contains an XSS vulnerability in admin/content/editcontent?id=29&gopage=1. The provided documents do not include exploitation details, affected components beyond this URL, or any fix/mitigation information.

CVE-2018-18722: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5...

YUNUCMS Cross-Site Scripting Vulnerability

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS version 1.0.7 cross-site scripting vulnerabilities. A remote attacker can inject arbitrary Web script or HTML with the help of content headings on the...

CVE-2018-9993

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

CVE-2018-9993: Improper Neutralization of Input During Web Page Generation

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

CVE-2017-11327

An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftpupload...

PT-2012-3840

Name of the Vulnerable Software and Affected Versions Drupal versions 7.x before 7.14 Description The issue allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page, due to improper access restriction ...

CVE-2012-2153: Undefined Security Weakness

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page...

CVE-2009-1249

Cross-site scripting XSS vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map...